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Abstract 

We describe a method for upper bounding the quantum query complexity of certain boolean formula 
evaluation problems, using fundamental theorems about the general adversary bound. This nonconstruc- 
tive method gives an upper bound on query complexity without producing an algorithm. For example, 
we describe an oracle problem which we prove (non-constructively) can be solved in O(l) queries, where 
the previous best quantum algorithm uses a polynomial number of queries. We then give an explicit 
O(l) query algorithm based on span programs, and show that for a special case of this problem, there 
exists a O(l) query algorithm that uses the quantum Haar transform. This special case is a potentially 
interesting problem in its own right, which we call the Haar Problem. 

1 Introduction 

The general adversary bound has proven to be a powerful concept in quantum computing. Originally 
formulated as a lower bound on quantum query complexity [10], it has been shown to be tight with respect 
to the quantum query complexity of evaluating any function, and in fact is tight with respect to the more 
general problem of state conversion [11]. The general adversary bound is in some sense the culmination of a 
series of adversary methods [2, 3]. While the adversary method in its various forms has been useful in finding 
lower bounds on quantum query complexity [1, 8, 17], the general adversary bound itself can be difficult to 
apply, as the quantity for even simple, few-bit functions must usually be calculated numerically [10, 17]. 

One of the nicest properties of the general adversary bound is that it behaves well under composition 
[11]. This fact has been used to lower bound the query complexity of composed total functions, and to create 
optimal algorithms for composed total functions [17]. In this work we extend one of the composition results 
to partial boolean functions, and use it to obtain an upper bound on query complexity by upper bounding 
the general adversary bound. 

Generally, finding an upper bound on the general adversary bound is just as difficult as finding an 
algorithm, as they are dual problems [11]. However, using the composition property of the general adversary 
bound, given an algorithm for a boolean function / composed d times, we upper bound the general adversary 
bound of /. Due to the tightness of the general adversary bound and query complexity, this procedure gives 
an upper bound on the query complexity of /, but because it is nonconstructive, it doesn't give any hint as 
to what the corresponding algorithm for / might look like. The procedure a bit counter-intuitive: we obtain 
information about an algorithm for a simpler function by creating an algorithm for a more complicated 
function. This is similar in spirit to the tensor-product trick, where an inequality between two terms is 
proved by considering tensor powers of those terms 1 . 

We describe a class of oracle problems called Constant- Fault Direct Trees (introduced by Zhan et 
al. [20]), for which this method proves the existence of a 0(1) query algorithm, where the previous best 
known query complexity is polynomial in the size of the problem. While this method does not give an explicit 
algorithm, we show that a span program algorithm achieves this bound. 

We show that a special case of Constant- Fault Direct Trees can be solved in a single query using an 
algorithm based on the quantum Haar transform. The quantum Haar transform has appeared as a subroutine 

^ee Terence Tao's blog, What's New "Tricks Wiki article: The tensor power trick," 
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in other algorithms [14, 9], and a 3-dimensional wavelet transform is the workhorse of an algorithm due to 
Liu [12]. We describe a new problem, the Haar Problem, that also can be solved with the quantum Haar 
transform. While the Haar Problem requires only 1 quantum query, it requires H,(\ogn) classical queries 
(where the oracle is an n-bit function). The Haar Problem is somewhat like period finding and may have 
interesting applications. 

2 A Nonconstructive Upper Bound on Query Complexity 

Our theorem for creating a nonconstructive upper bound on query complexity relies on the tightness of the 
general adversary bound with respect to query complexity, and the properties of the general adversary bound 
under composition. The actual definition of the general adversary bound is not necessary for our purposes, 
but can be found in [8[. 

Our theorem applies to boolean functions. A function / is boolean if / : S — > {0, 1} with S C {0, l} n . 
Given a boolean function / and a natural number d, we define f d , "/ composed d times," recursively as 
f d = f°(f d -\...,f d - 1 ), where f 1 = f. 

Now we can state the main theorem: 

Theorem 1. Suppose we have a (possibly partial) boolean function f that is composed d times, f d , and a 
quantum algorithm for f d that requires 0(J d ) queries. Then Q(f) = O(J), where Q(f) is the bounded-error 
quantum query complexity of f . 

(For background on bounded-error quantum query complexity and quantum algorithms, see [2].) There are 
seemingly similar results in the literature; for example, Reichardt proves in [15] that the query complexity 
of a function composed d times, when raised to the l/d th power, is equal to the adversary bound of the 
function, in the limit that d goes to infinity. This result is meant to give understanding of the exact query 
complexity of a function, whereas our result is a tool for upper bounding query complexity, possibly without 
gaining any knowledge of the exact query complexity of the function. 

One might think that Theorem 1 is useless because an algorithm for f d usually comes from composing 
an algorithm for /, and one expects the query complexity of the algorithm for f d to be at least J d if J is 
the query complexity of the algorithm for /. 

Luckily for us, this is not always correct. If there is a quantum algorithm for / that uses J queries, 
where J is not optimal (i.e. is larger than the true bounded error quantum query complexity of /), then the 
number of queries used when the algorithm is composed d times can be much less than J d . If this is the case, 
and if the non-optimal algorithm for / is the best known, Theorem 1 promises the existence of an algorithm 
for / that uses fewer queries than the best known algorithm, but, as Theorem 1 is nonconstructive, it gives 
no hint as to what the algorithm looks like. 

We need two lemmas to prove Theorem 1: 

Lemma 1 (Based on Lee et al. [11]). For any boolean function f : S — > {0, 1} with S C {0, 1}™ and natural 
number d, 

ABV ± (f d )> (ADV ± (/)) d . (1) 

The proof of this lemma is in Appendix A. H0yer et al. [10] prove Lemma 1 for total boolean functions 2 , 
and the result is extended to more general total functions in [11]. Our contribution is to extend the result 
to partial functions. While Theorem 1 still holds for total functions, the example we will describe later in 
the paper requires it to hold for partial functions. 

Lemma 2. (Lee, et al. [11]) For any function f : S — > E, with S € D n , and E, D finite sets, the bounded- 
error quantum query complexity of f, Q(f), satisfies 

Q(/) = 6(ADV ± (/)). (2) 



2 While the statement of Theorem 11 in [10] seems to apply to partial functions, it is mis-stated; their proof actually assumes 
total functions. 
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We now prove Theorem 1: 
Proof. Given an algorithm for f d that requires 0(J d ) queries, by Lemma 2, 

ADV ± (/ d ) = 0(J d ). (3) 

Combining Eq. (3) and Lemma 1, we have 

(ADV ± (/)) d = 0{J d ). (4) 

Raising both sides to the l/d th power, we obtain 

ADV ± (f) = 0(J). (5) 

At this point, we have the critical upper bound on the general adversary bound of /. Finally, using Lemma 2 
again, we have 

Qif) = O(J). (6) 

□ 

3 Example where the General Adversary Upper Bound is Useful 

In this section we will describe a function, called the 1-Fault Nand Tree, for which Theorem 1 gives a 
better upper bound on query complexity than any known quantum algorithm. The 1-Fault Nand Tree 
was proposed by Zhan et al. [20] to obtain a superpolynomial speed-up for a boolean formula with a promise 
on the inputs, and is a specific type of Constant-Fault Direct Tree, which is mentioned in Section 1. 
We will first define a Nand Tree, and then explain the promise of the 1-Fault Nand Tree. 

The Nand Tree is a complete, binary tree of depth n, where each node is assigned a bit value. The 
leaves are assigned arbitrary values, and any internal node v is given the value NAND(val(vi), val{v2)), where 
v\ and i>2 are v's children, and val(vi) denotes the value of that node. 

To evaluate the Nand Tree, one must find the value of the root given an oracle for the values of the 
leaves. (The Nand Tree is equivalent to solving nand™, although the composition we will use for Theorem 1 
is not the composition of the NAND function, but of the Nand Tree as a whole.) For arbitrary inputs, Farhi 
et al. showed that there exists an optimal algorithm in the Hamiltonian model to solve the Nand Tree 
in 0(2 - 5 ™) time [6], and this was subsequently extended to a standard discrete algorithm with quantum 
query complexity 0(2°- 5 ™) [5, 16]. Classically, the best algorithm requires 2 753n queries [18]. Here, we will 
consider the 1-Fault Nand Tree, for which there is a promise on the values of the inputs. 

Definition 1. (1-Fault Nand Tree [20]) Consider a Nand Tree of depth n, (as described above). Then 
to each node v, with child nodes V\ and w 2 , we assign an integer k(v) such that: 

• k(v) — for leaf nodes. 

• k(v) = max,j n(vi), if val(vi) — val(v2) 

• Otherwise val(v{) =^ val{v2). Let Vi be the node such that val(vi) — 0. Then k(v) = 1 + n{vi). 
A tree satisfies the 1-fault condition if k(v) < 1 for any node v in the tree. 

Notation: When val(v\) ^ val(v2) we call the node v a fault. (Since NAND(0, 1) = 1, fault nodes must 
have value 1, although not all 1-valued nodes are faults.) 

The 1-fault condition is a limit on the amount and location of faults within the tree. In a 1-Fault Nand 
Tree, if a path moving from a root to a leaf encounters any fault node and then passes through the 0- valued 
child of the fault node, there can be no further fault nodes on the path. An example of a 1-Fault Nand 
Tree is given in Figure 1. 

Zhan et al. [20] propose a quantum algorithm for an n level 1-Fault Nand Tree that requires 0(n 2 ) 
queries to an oracle for the leaves. However, when the 1-Fault Nand Tree is composed log n times, they 
apply their algorithm and find it only requires 0(n 3 ) queries. (Here we see an example where the number 
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Figure 1: An example of a 1-Fault Nand Tree of depth 4. Fault nodes arc highlighted by a double circle. 
The node v is a fault since one of its children (vi) has value 0, and one (i^) has value 1. Among v% and its 
children, there are no further faults, as required by the 1-fault condition. At V2, we can have faults below 
the 1-valued child of V2, but there can be no faults below the 0-valued child. 

of queries required by an algorithm composed d times does not scale exponentially in d, which is critical for 
applying Theorem 1.) By applying Theorem 1 to the algorithm for the 1-Fault Nand Tree composed logn 
times, we find that an upper bound on the query complexity of the 1-Fault Nand Tree is 0(1). This is a 
large improvement over 0(n 2 ) queries. Zhan et al. prove fl (poly log n) is a lower bound on the classical query 
complexity of 1-Fault Nand Trees. An identical argument can be used to show that Constant-Fault 
Nand Trees (from Definition 1, trees satisfying k(v) < c with c a constant) have query complexity 0(1). 

In fact, Zhan et al. find algorithms for a broad range of trees, where instead of NAND, the evaluation tree 
is made up of a type of boolean function they call a direct function. A direct function is a generalization of 
a monotonic boolean function, and includes functions like majority, threshold, and their negations. For the 
exact definition, which involves span programs, see [20]. Applying Theorem 1 to their algorithm for trees 
made of direct functions proves the existence of 0(1) query algorithms for Constant- Fault Direct Trees 
(an explicit definition of Constant-Fault Direct Trees is given in Appendix B). The best quantum 
algorithm of Zhan et. al requires 0{n 2 ) queries, and again they prove f2(polylogn) is a lower bound on the 
classical query complexity of Constant-Fault Direct Trees. 

The structure of Constant-Fault Direct Trees can be quite complex, and it is not obvious that 
there should be a O(l) query algorithm. Inspired by the knowledge of the algorithm's existence, thanks to 
Theorem 1, we found a span program algorithm for Constant-Fault Direct Trees that requires O(l) 
queries. In the next section we will briefly describe this algorithm (details can be found in Appendix B). 
However, as with many span program algorithms, it is hard to gain intuition about the algorithm. Thus in 
later sections we will describe a quantum algorithm based on the Haar transform that solves the 1- Fault 
Nand Tree in 1 query in the special case that there is exactly one fault on every path from the root to a 
leaf, and those faults all occur at the same level. 

4 Quantum Algorithms for CONSTANT-FAULT DIRECT TREES 
4.1 Span Program Algorithm 

Span programs are linear algebraic representations of boolean functions, which have an intimate relationship 
with quantum algorithms. In particular, Reichardt proves [15] that given a span program P for a function 
/, there is a function of the span program, called the witness size, such that one can create a quantum 
algorithm for / with query complexity Q(f) such that 

Q(f) = 0(WITNESS SIZE(P)) (7) 

Thus, creating a span program for a function is equivalent to creating a quantum query algorithm. 
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There have been many iterations of span program quantum algorithms, due to Reichardt and others 
[11, 15, 17]. In [20], Zhan et al. create span programs for direct boolean functions [20] using the span 
program formulation described in Definition 2.1 in [15], one of the earliest versions (we will not go into the 
details of span programs in this paper). Using the more recent advancements in span program technology, 
we show here: 

Theorem 2. Given an evaluation tree composed of the direct boolean function f , with the promise that the 
tree satisfies the k-fault condition, (k a natural number), there is a quantum algorithm that evaluates the 
tree using 0(w k ) queries, where w is a constant that depends on f. In particular, for a CONSTANT-FAULT 
Direct Tree, (k a constant), the algorithm requires O(l) queries. 

Properties of direct boolean functions and precise definitions for the fc-fault condition can be found in 
Appendix B, as well as the proof of Theorem 2. The proof combines the properties of the witness size of 
direct boolean functions with a more current version of span program algorithms, due to Reichardt [15]. 
(For more details on direct boolean functions, see [20].) 

Thus, while Theorem 1 promises the existence of O(l) query quantum algorithms for Constant-Fault 
Direct Trees, Theorem 2 gives an explicit 0(1) query quantum algorithm for these problems. 

4.2 Quantum Haar Transform Algorithm 

In this section we will describe a quantum algorithm for solving the 1-Fault Nand Tree in a single query 
when there is exactly one fault node in each path from the root to a leaf, and all those faults occur at the 
same level, as in Figure 2b. We call this problem the Haar Tree. 

Let's consider the values of the leaves on a Haar Tree. When there are no faults in a Nand Tree, as 
in Figure 2a, then all even depth nodes have the same value as the root, and all odd depth nodes have the 
opposite value. Since faults can only occur at nodes with value 1 (since nand(0, 1) = 1), the level of the tree 
containing faults must occur at even depth if the root has value 1 or at odd depth if the root has value 0. 
Thus if all the faults are at height h (so their depth is n—h), then the value of the root is PARiTY(n — h + 1) . 




(a) Nand Tree with no faults (b) Nand Tree with one fault per path 

Figure 2: Figure (a) shows a Nand Tree with no faults, and Figure (b) shows a Haar Tree. In Figure 
(a), at each depth, all nodes have the same value, depending on the parity of the level. In Figure (b), since 
the root is 0, the level of faults occurs at odd depth. (Faults are double circled.) The first half of the leaves 
descending from a fault node have one value, and the next half have the opposite value. 

Now consider the leaves descending from a fault node v when there are no further faults at any nodes 
descending from v (as in Figure 2b). If v is at height h, then it has 2 h leaves descending from it. Because 
one of v' s children has value 0, and one has value 1, the 2 h ~ 1 leaves descending from one child will all have 
the same value, b, and the 2 h ~ 1 leaves descending from the other child will have the value -^b. For a Haar 



5 



Tree, since we are promised all faults are at the same height h, the values of the leaves will come in blocks 
of 2 h , where within each block, the first 2 h ~ 1 leaves will have one value, and the next 2 h ~ 1 leaves will have 
the negation of the value in the first set of leaves. 

We can now reformulate the Haar Tree outside of the context of boolean evaluation trees. We define 
a new problem, the Haar Problem, to which the Haar Tree reduces. For the Haar Problem, one is 
given access to an oracle for a function x : {0, . . . ,2" — 1} — » {0, 1}. We call the i th output of the oracle 
Xi. The function x is promised to have a certain form: there exists an integer h* £ {1, . . . , n} and boolean 
variables bi for I £ {!,..., 2 n ~ h } such that 



'b h H2 h '{l-\)<i<2 h *{l-\) 
-.fy, if 2 h '{l~ \) < i < 2 h 'l. 



See Figure 3 for an example of a Haar Problem oracle. 
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Figure 3: An example of an oracle function for the Haar Problem with n = 5 (so i is an integer, < i < 32) 
and h = 2 (so the function is divided into blocks of length 2 2 =4). We have emphasized the blocks by 
separating them using vertical lines. In each block the first two outputs have value 1 and the next two have 
value 0, or vice versa. 

The Haar Problem is almost like period finding. We are promised that the function is divided into 
blocks of length 2 h , and we need to find the length of these blocks. But instead of the output being the 
same in each block, each block has one degree of freedom: within the I th block, there is a choice of bi = or 
bi = 1, where the first half of the outputs have value &z, and second half have value —hi. 

Note that any oracle for the Haar Problem is also an oracle for the Haar Tree; to solve the Haar 
Tree, simply solve the Haar Problem, and then calculate parity(?i - h* + 1). 

The quantum algorithm for solving the Haar Problem requires making a measurement in the Haar 
wavelet basis [7, 13]. The Haar basis is based on the following step-like function: 



1 if < i < 1/2 
tp(t) = { -1 if 1/2 < i < 1 
otherwise. 



(9) 



On the 2™ dimensional Hilbert space, with standard basis states {\i)}, i £ {0, 
Haar basis consists of the states {\4>o}, IV'tm)} 1 



, 2 n — 1}, the (un-normalized) 



bo) = £ |<), 



3=0 



|W>= E ^(2- fc <-(l-l))|i) 



»=o 



(10) 



where h £ {1, . . . , n} and I £ {1, . . . , 2 n ~ h }. Several Haar basis states for n = 3 are shown in Figure 4a. 

We suppose that we have access to a phase-flip oracle O x such that O x \i) — (— l) Xi |i) where {x{\ satisfy 
the promise of the Haar Problem oracle. Then the following algorithm solves the Haar Problem in one 
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(a) Haar States 
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Figure 4: Figure (a) shows four of the eight un-normalized Haar basis states for n — 3. The a;-axis depicts the 
standard basis states {|0), |1), . . . , |7)}, while the y-axis shows the un-normalized amplitude corresponding 
to each basis state. The line graphs represent the underlying functions ip(2~ h i — (I — 1)) that give the states 
their form, while the amplitudes themselves are represented by dots. Figure (b) shows \£ x ) for x with n = 3, 
h* = 2, b = 1, and bi — 0, plotted as a function of the non-normalized amplitude of each standard basis 
state. 



query: 



1 

(1) Create an equal superposition of standard basis states: |£) = ^_ \i) 

1 2 " _1 

(2) Apply the phase flip oracle, giving = __ ( — l)*'^ 



3=0 



(3) Measure |£ x ) in the Haar basis. If the state \iph,i) is measured, return h. 



It is especially easy to see why the algorithm works graphically. Suppose we are given an oracle x with 
n = 3 and h* — 2. Then 1^) (the state in step (2) of the algorithm) is a superposition of all standard 
basis states, with amplitudes as shown, for example, in Figure 4b. One can see by comparing the graphs in 
Figure 4a and Figure 4b that the amplitudes completely destructively interfere for the inner product of 1^) 
and any Haar basis states except {1^2,;)} (since here h* = 2). 

Classically, the Haar Problem can be solved in 8(logn) queries, where indicates tightness up to 
log log factors. The proof of this fact, as well as a description of a subset of inputs on which the 1- Fault 
Nand Tree becomes classically easy, can be found in Appendix C. 

4.3 Extensions and Related Problems 

There are other oracle problems whose algorithms naturally involve the quantum Haar transform. In the 
Haar Problem, the oracle has the property that when the phase flip oracle operation is applied to an equal 
superposition of standard basis states, the outcome is a superposition of non-overlapping Haar basis states. 
All Haar basis states in this superposition have the form \iph*,l}- One can design a new oracle such that 
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when the the phase flip operation is applied, the outcome is still a superposition of non-overlapping Haar 
basis states, but now all Haar basis states in the superposition share a new common feature. For example, 
they could all have the form Itph^i) where hj is promised to either be even or odd. In this case, the goal 
would be to determine whether {hj} are even or odd, and a single quantum query in the Haar basis will give 
the answer. 

This new promise problem (determining whether {hj} are even or odd) is equivalent to solving a 1-Fault 
Nand Tree where each path from the root to the leaves contains exactly one fault, but those faults are 
now not all on the same level. 

The Haar Problem is closely related to the Parity Problem introduced by Bernstein and Vazirani 
[4]. Let x : {0, 1}™ -> {0, 1} such that x, = i ■ k where k £ {0, 1}™. Then the Parity Problem is: given an 
oracle for x, find k. The Parity Problem can also be solved in a single quantum query. 

Notice that any oracle that satisfies the promise required by the Parity Problem also satisfies the 
promise required by the Haar Problem (although the converse is not true). The algorithm for the Parity 
Problem is similar to the quantum Haar transform algorithm described in Section 4.2, except in step (3), 
one measures in the Hadamard basis rather than the Haar basis, and obtains the output k. It is not hard 
to show that the Bernstein and Vazirani algorithm can also be used to solve the Haar Problem; the value 
of h* is the location of the first non-zero bit of the outcome of the Parity Problem, counting from least 
significant to most significant bits. While both the Haar and Parity Problems are similar, the Haar 
Problem has a less stringent promise, and is slightly more natural, when viewed as finding the period of a 
function with some freedom within each period. 

5 Conclusions and Future Work 

We describe a method for upper bounding the quantum query complexity of boolean functions using the 
general adversary bound. Using this method, we show that Constant-Fault Direct Trees can always be 
solved in 0(1) queries. Furthermore, we create an algorithm with a matching upper bound using improved 
span program technology. For the more restricted case of the Haar Tree we give a single query algorithm 
using a reduction to the Haar Problem. The Haar Problem is a new oracle problem that can be solved 
in a single quantum query using the quantum Haar transform, but which requires Q (log n) classical queries 
to solve. This problem seems to fall somewhere in between the Parity Problem of Bernstein and Vazirani 
[4] and period finding. Period finding has been shown to have useful applications, most notably in factoring 
[19]. Thus we hope that a new application for the Haar Problem or the quantum Haar transform can be 
found. In particular, the fact that the quantum Haar transform can be used find the length of blocks in the 
Haar Problem, while ignoring the extra degree of freedom in each block, seems like a useful property. 

We would like to find other examples where Theorem 1 is useful, although we suspect that Constant- 
Fault Direct Trees are a somewhat unique case. It is clear from the span program algorithm described 
in Appendix B that Theorem 1 will not be useful for composed functions where the base function is created 
using span programs. However, there could be other types of quantum walk algorithms, for example, to 
which Theorem 1 might be applied. In any case, this work suggests that new ways of upper bounding the 
general adversary bound could give us a second window into quantum query complexity beyond algorithms. 
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A Composition Proof 



A.l Set-up 

In this section, we will prove Lemma 1: 

Lemma 1 (Based on Lee et al. [11]). For any boolean function f : S — > {0, 1} with S C {0, 1}™ and natural 
number d, 

ADV ± (/ d ) > (ADV ± (/)) d . (1) 

This proof follows that of Appendix C from Lee et. al [11] very closely, including most notation. The 
difference between this Lemma and that in Lee et. al is that / is allowed to be partial. We write out most 
of the proof again because it is subtle where the partiality of / enters the proof, and to allow this appendix 
to be read without constant reference to [11]. 

First, we use a new expression for the general adversary bound derived from the dual program of the 
general adversary bound: 

ADV* (a) = max W • J 

w, noi=n 

subject to W o G = 

n ± w o a, y o 

Tr(fi) = 1 (11) 

where g : C — > {0, 1}, with C C {0, l} m and all matrices are indexed by x, y <E C, so e.g. [W]^ is the element 
of W in the row corresponding to input x and column corresponding to input y. >1 means positive semi 
definite, J is the all l's matrix, W • J means take the sum of all elements of W, G satisfies [G] xy = & g ( x )g(y)i 
Aj satisfies [Ai] XJ/ = 1 — S xm with xi the value of the i th bit of the input x. We call Aj the filtering matrix. 

We consider the adversary bound for a composed function fog consisting of the functions g : C — > {0,1} 
with C C {0, \} m and / : D — > {0, 1} with D C {0, 1}™. We will show that given the optimal matrices in Eq. 
(11) corresponding to / and g, we can create a new set of matrices corresponding to the composed function 
such that ADV ± (/ o g) = ADV ± (/)ADV ± ( 5 ). 

We introduce a some notation regarding inputs: we consider the input to / o g to be a vector of inputs 
x = [x , . . . ,x n ) with x l £ C. Given an input x to the composed function, we also consider the input x to 
the / part of the function: x — (g(x 1 ), . . . ,g(x n )). 

We assume that the initial input x — (x , . . . ,x n ) is valid for the g part of the composition, i.e. x l € C 
Mi. A problem might arise if x, the input to /, is not an element of D. This is an issue that Lee et al. do not 
have to deal with, but which might break the proof. Here we show that the proof goes through with small 
modifications. 

The main new element we introduce is a set of primed matrices, which extend the matrices indexed by 
inputs to / to be indexed by all elements of {0, 1}™, not just those in D. For a primed matrix A' , indexed 
by x, y £ {0,1}™, if x ^ D or y ^ D, then [^4']ij, = 0. We use similar notation for matrices indexed 
by x = (x , . . . , x 11 ) where i € fl; we create primed matrices by extending the indeces to all inputs x 
corresponding to x with x ^ D by making those elements 0. For matrices A' indexed by {0, 1}™, we define 
a new matrix A' indexed by C™, as [A']^ = where x is the output of the g functions on the input x, 

and likewise for y and y. A' expands each element of A' into a block of elements. 

Let (W,Q) be an optimal solution for / with ADV ± (/) = dt, and (V,A) be an optimal solution for g 
wtih ADV (g) = d g . To clarify the filtering matrices, we let A q refer to g, A p refer to /, and A( p 9 ) refer to 
inputs to the composed function fog. Notice if (V, A) is an optimal solution to the dual program for /, then 
the extended matrices (V, A') also satisfy the conditions of the dual program, and give an optimal solution. 

A.2 Proof 

Before we get to the main lemma, we will need a few other results: 

Lemma 3. [11] Let M' be a matrix labeled by x € {0, 1}™, and M' be defined as above. Then if M' >z 0, 
M' > 0. 
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Proof. This claim is stated without proof in [11]. M' is created by turning all of the elements of M' into 
block matrices with repeated inputs. If an index x £ {0, 1}" is expanded to a block of k elements, then there 
are k — 1 eigenstates of M' that only have nonzero elements on this block and have eigenvalue 0. We obtain 
a set of 0-valued eigenvectors in this way. Now we look at the eigenvectors v 1 of M' and create new vectors 
v l in the space of M' . We take the x th element of v 1 , divide it by k (the size of the block), and give every 
clement in the corresponding block in v l that value. The vectors v l complete the basis with the 0-valued 
eigenvectors, and are orthogonal to the 0-valued vectors, but not to each other. However, the v % have the 
property that v %T M'v^ = 5yAi where \ is the eigenvalue of v 1 , so A; > 0. Thus using these vectors as a 
basis, we have that x T M'x > for all vectors x. □ 

The following is identical to Claim C.l from [11] and follows because in both our cases, g can be a partial 
boolean function. 

Lemma 4. For a function g as described above, there is a solution to the dual program, (W,Q), achieving 
value d g and satisfying the following properties: d g £l ± W >z 0, and 2rj(it)=l %) = ^2 x -g(x)=0 ^{ x i x ) — 
1/2- ' " ' 

Now we prove the following 

Lemma 5. A solution to the dual program for f o g is (U, T), where (V , T') = (c x V' o (d g fl + W)® n , c x 
d™" 1 !' o Q® n ) where c = 2 n d g (n ~ 1] , and such that ADV ± (/ o g) = d g d f . 

Proof. The first thing to check is that U' and T' are valid primed matrices, or otherwise we can not recover U 
and T. Because each of U' and T' are formed by Hadamard products with primed matrices, they themselves 
are also primed matrices. 

We will first calculate the objective function, and then check that (£/', T') (and hence (U, T)) satisfy the 
conditions of the dual program. 
The objective function gives: 

j.(cV'o(d g n + w)® n ) = c Y, ^ E lii^Mxv + WW) 

a,beD X >V i 

/(o)//(6) x=a.,y=b 



E \ v u\[ E V a PW + [wy vi ) 



a,beD 



x ,V 



f{*W(b) g(x-)=a z 

g{y z )=bi 

= cxd f [-£) =d f d g (12) 

where in the first line we've replaced V' by V because adding extra 0's does not affect the sum. In the 
second line, and bi are the i th bits of a and b respectively, and we've changed the order of multiplication 
and addition. This ordering change is not affected by the fact that / is partial, since the first summation 
already fixes an input to /. For the inner summation in the final line, we consider the cases ai — bi, and 
<Zj 7^ bi separately. When = bi, from the conditions on the dual program, we know that [W 7 ]^^ = so 
in this case, only [n] x i y > fires. Since O is diagonal, it is only non-zero for x % — y l , and using Lemma 4, for 
<Zj = bi the sum is d g /2. When dj ^ bi, then x l ^ y l , so [0]^*^. = 0. However, the sum will include exactly 
half of the elements of W. Since W is symmetric, this amounts to \W • J = d g /2. Multiplying n times for 
the product over the i's and using the definition of the objective function for / gives the final result. 

Now we show that U' and T' satisy the conditions of the dual program. First, we have that [C/'] Ky = 
for (/ o g){x) ± (/ o g)(y) since [V% y = for (/ o g)[x) + (/ o g)(y). 

Next, from Lemma 4 and from the conditions on the dual programs for / and g, we have d g tt ± W >z 0, 
± W o A q y 0, and A'±7'oA' ^ 0. Then by Lemma 3, A ± V o A p y 0. Since tensor and Hadamard 
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product preserve semi-definite positivity, we get 



o x (A' ± v' o Ap) o ((d g n + w)^-^ ® (n + w o a,) ® + wo® (n ~ p) ) 



(V" o A p ) o f (d^fi + VK)® (p - 1} g (fi + W o A,) <8> + W)® (n - p) ^j (13) 



where the last line comes from the fact that [W].^* = for x = y while A' is only nonzero for elements 
[A'] X3/ with x = y. Now the f2 in the p th tensor product in the last line is only nonzero for SI x p :V p when 
x p = y p . However for the corresponding x and y, that means [A']^ = 0. Thus that fl has no affect on the 
expression, and we can replace it with d g £l. Then we can combine the tensor products to get: 

r< d^" 1 !' o n® n ± {V 1 o Ap) o UdgQ, + W)® n o { j®^- 1 ) ® A ? ® (14) 

where the bracketed term leaves everything alone except it Hadamards a A q with the p th (d g £l + W) in the 
previous tensor product. Although the A g acts on (d g fl + W), we already know that ft term falls out, so it 
essentially acts only on the W, which is what we want to maintain equality with (13). 

Now the term {J®(z> -1 ) g A g ® J®(™-p)} i s almost A(p )9 ), except it is like a primed matrix; its indeces 
are all elements in C n , not just valid inputs to /. However, it is not primed, in that some of its elements 
to non- valid inputs to / are non-zero. However, since it is involved in a Hadamard product with primed 
matrices, namely V, all of these terms are zeroed, so we can make it be a primed matrix without affecting 
the expression. Finally, using similar arguments as above, the A' p term has no affect and can be removed. 
Thus we obtain r< d 71 " 1 ^ o n® n ± V' o (d g + W)® n o A' q) , fulfilling the positivity constraint of the dual 
program. 

Finally, we need to check that Tr^d^A' o f2«" 1 ) = 1: 



Tv(cd-- 1 A'on^) = cd n g - 1 J2i A U E UP 



X L X L 

a£D x:x—a i 

= cd n g - 1 J2lMaaU E M*"" 
a£D i x i :g(x i )=a i 

where all of the tricks here follow similarly from the discussion following Eq. (12). □ 



B Span Program Algorithm 

In this section we will prove Theorem 2: 

Theorem 2. Given an evaluation tree composed of the direct boolean function f , with the promise that the 
tree satisfies the k-fault condition, (k a natural number), there is a quantum algorithm that evaluates the 
tree using 0(w k ) queries, where w is a constant that depends on f. In particular, for a CONSTANT-FAULT 
Direct Tree, (k a constant), the algorithm requires 0(1) queries. 

First we will give a definition of a A-Fault Direct Tree, which is a boolean evaluation tree made up 
of a direct boolean function composed many times, with an additional promise on the input. The definition 
of direct boolean functions are a bit technical and are given in [20]; here we will just use their properties. 
In general, given a direct boolean function / with p inputs, a Direct Tree for / is a depth-n, p-partite 
complete graph, where each node is given a boolean value. The value of the node v, val{v) is given by 
val{v) = f(val(vi), . . . ,val(v p )) where Vi is the i th child node of v. The values of the leaves are given via 
an oracle, and the goal is to find the value of the root of the tree. A fc-FAULT Direct Tree is a Direct 
Tree with inputs that satisfy certain conditions; the definition is similar to Definition 1 for fc-FAULT Nand 
Trees: 
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Definition 2. Let T be a Direct Tree for f. Let each node be labeled as fault or trivial based on the 
values of its children and the specific function f used. If a node is a fault, a set of its child nodes are labeled 
strong in relation to the fault node, and the remaining inputs are labeled weak. (For examples of strong, 
weak, trivial, and fault nodes for f = Nand, see below.) Then to each node v, with child nodes {vi, . . . ,v p } 
we assign an integer k(v) such that: 

• k(v) — for leaf nodes. 

• k(v) — maXj«;(Wj), if v is trivial 

• Otherwise v is a fault. Then k(v) = 1 + max i: „. is strong ^(vi). 

A tree satisfies the k-fault condition if n(v r ) < k where v r is the root. This restriction is slightly relaxed 
compared to Definition 1, where it was required that k{v) = 1 for all nodes v in the whole tree. Thus the 
span program algorithm applies to an even broader range of trees. 

In Definition 1, we saw that for / =nand, a node with both of its children having the same value (either 
both or both 1), is trivial, and a node with one 0-valued child and one 1-valued child is a fault. Furthermore, 
for / =nand, for fault nodes, the 0-valued child is strong, and the 1-valued child is weak. One can verify 
that with these assignations, Definition 1 corresponds to Definition 2 for / =NAND. 

For a function / : D — > {0, 1}, with D C {0, 1}™, x G D, and span program P, the weighted witness size 
is WSIZE S (P, x) where s € (M + ) p is the weighting vector. When s = (1, . . . , 1), we write WSlZEi(P, x). Then 
following [15], we can rewrite Eq. (7) as 

Q(f) = 0(maxWSiZEi(P,a;)) (16) 

In [20], Zhan et al. show that for any direct boolean function /, one can create a span program P with 
the following properties 3 : 

• wsiZEi(P, x) = 1 if x makes the function trivial. 

• wsiZEi(P, x) <w,\ix makes the function a fault, where w is a constant depending only on /. 

• For WSIZE S (P, x) where x makes the function a fault, Sj do not affect the witness size, where the j th 
input is weak. 

To create an algorithm, we will combine these facts with Eq. (16) and the following composition theorem 
(based on [15]): 

Theorem 3. (based on Theorem 4.3 in [15]) Let f : D -> {0,1}, D C {0, 1} P and g : C -> {0,1}, 
C Q {0, l} m , and consider the composed function (/ o g)(x) with x — (x , . . . , x p ), x l G C and g(x l ) € D Vi. 
Let x = (g(x 1 ), . . . , g(x p )) £ D. Let G be a span program for g, F be a span program for f, and s £ (M + )" xm . 
Then there exists a span program P for fog such that 

WSIZE S (P, x) < WSIZE r (P, x) (17) 

where r = (wsiZE s i(G,x 1 ), . . . ,wsize sP (G,x p )) and s 4 is a vector of the i th set of m elements of s. In 
particular 

WSIZE S (P, x) < wsiZEi(F, i) maxWSlZE s i(G, x l ) (18) 

»e[p] 



3 We note that Zhan et al. use a different version of span programs than those used to prove Eq (16). However Reichardt 
shows in [15] how to transition from one span program formulation to another, and proves that there is a transformation from 
the span program formulation used by Zhan et al. to the one needed in for Theorem 3 that does not increase the the witness 
size and that uses the weighting vector in the same way. 
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The main difference between this theorem and that in [15] is that the witness size here is input dependent, 
as is needed for partial functions. We also use a single inner function g instead of p different functions gi, 
but we allow each inner function to have a different input . The proof of this result follows exactly using the 
proof of Theorem 4.3 in [15], so we will not repeat it here. 

Using the properties of strong and weak nodes in direct boolean functions, we can rewrite Eq. (18) as 

wsize s (P, x) = wsizei(F, x) max wsiZE s i (G, x l ). (19) 

ie[ P ] 

s.t. i is strong 

We now prove Theorem 2: 

Proof. For a direct function /, we know there is a span program P such that WSlZEi(P, x) < w for all 
fault inputs and WSIZEi(P, x) — 1 for trivial inputs. We will show that this implies the existence of a span 
program for the k- Fault Direct Tree with witness size < w k . 

We will use an inductive proof on k (the number of faults) and on n, the depth of the tree. For the base 
case, consider a depth 1 tree. This is just a single direct boolean function. If it is a fault, then we have a 
1-fault tree, and using the properties of direct boolean functions, there is a span program with witness size 
at most w. Hence there exists a quantum algorithm with query complexity 0(w) that evaluates this tree. If 
the depth 1 tree has no faults, then we have a single, trivial direct boolean function with witness size 1, and 
hence there exists quantum algorithm with query complexity O(l) that evaluates this tree. 

Consider a depth n, fc-fault tree T with input x. We can think of this instead as a single direct function 
/, (with input x and span program P), composed with p subtrees of depth n — 1, where we label the i th 
subtree T\ Let P T i be a span program for T*, and we call the input to that subtree x % . If x makes / a fault, 
then by Eq (19) we know there exists a span program Pt for T such that: 

wsrzEi(Pr,a;) = wsize^P, x) x max wsizei (P Ti ,x l ) 

ie[p] 

i:i is strong 

<wx max wsiZEi(P T i,x l ). (20) 

»e[p] 

is strong 

Now if we take the subtree T l that maximizes the 2 nd line, then by the definition of fault tress, T % is a (k— 1)- 
fault tree. By inductive assumption, there is a span program for T % satisfying WSlZEi (P T i* ,x z ) < w k ~ 1 , so 
T satisfies WSlZE 1 (P r , x) < w k . 

If the input x makes / trivial, then by Eq (19) we have: 

WSiZEi(P T ,x) = WSIZEi(P, x) x maxWSlZEi(P l , x l ) 

i 

= 1 x maxwsiZEi(P l , x % ) — wsrzEi(P\ x % ). (21) 

i 

Now if we take the subtree T l that maximizes the 2 nd line, then by the definition of fault tress, T % is a k 
fault tree with k < k. But we know if k < k — 1, then WSIZEi (P T i* , x 1 ) < w k ~ 1 by inductive assumption, so 
we're done in that case. So instead we assume k — k. Thus we have reduced the problem to a smaller depth 
tree, and we can repeat the above procedure until we find the first subtree with a fault at its root or show 
that there are no further faults in the tree. Since the tree has finite depth, this procedure will terminate. □ 

C Classical Lower Bounds and Algorithms 

We have shown that both the Haar Tree and the Haar Problem can be solved in a single quantum 
query. For the Haar Problem, we have a classical lower bound of f2(logn) from the fact that the outcome 
is an integer from 1 to n. Zhan et al. [20] show that fi(polylogn) is also a classical lower bound on the 
Haar Tree. 

We next give a classical BPP algorithm that solves the Haar Problem in (9(logn x log log n) queries. 
The algorithm is basically a binary search for h* among {1, . . . , n}. There are thus logn steps in the binary 
search, but at each step, the algorithm has to account for the oracle's extra degrees of freedom in its choice 
of the 6/'s. This results in O (log logn) extra error correcting queries at each step of the binary search 
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Theorem 4. The Haar Problem can be solved by a BPP machine in 0(logn x log log n) queries. 

Proof. We present the algorithm. Let 2 h be the size of the blocks in the oracle to the Haar Problem. At 
each step of the binary search, for some integer h, the algorithm tries to answer the question: is h < h* or 
is h > h*l 

If h < h* then for all < i < 2 , X{ — b for some b € {0,1}. If h > h* then for Xj such that 
< i < 2 h , exactly half have value and half have value 1. Randomly query log(clogn) elements of Xi for 
< i < 2 h . If all queried bits return the same value, the algorithm decides h < h* , otherwise it decides 
h > h* . There is an error if all queried bits return the same value, but h > h* . This happens with probability 
(.5)i°g(d°gn) = l/( c logn). 

Since there are n possible values h* can take, there are \ogn rounds in the binary search, and the 
probability of error in each step is l/(clogn), giving 1/c as the total probability of error by the union bound. 
By increasing c, we can make the probability of error as small as desired. There are log n rounds with 
log(clogn) bits queried at each round, solving the Haar Problem in O(lognloglogn) classical queries. □ 

We suspect the classical algorithm can be improved to O(logn) queries (i.e. we conjecture that the lower 
bound is tight). 

This algorithm can also be used to solve the problem of the n level 1-Fault Nand Tree where each 
path from the root to the leaves contains exactly one fault but those faults are now not all on the same 
level of the tree. Using the algorithm above, one finds the height hi of the left most fault in the tree in 
logn x log log n queries. Then the output is just PARITY(n — hi + 1). 

We will not give a classical algorithm for all instances of the 1-Fault Nand Tree, but we can show that 
for a large set of inputs to 1-Fault Nand Trees, a classical algorithm can evaluate the tree in a constant 
number of queries. We prove: 

Lemma 6. If the majority of the leaves of a 1-Fault Nand Tree have value g, then an even depth tree 
has value g, and an odd depth tree has value —tg. 

Thus if one value of the leaves has a majority, the 1-Fault Nand Tree reduces to Majority. Now 
consider inputs to the 1-Fault Nand Tree with the promise that the ratio of 0-valued leaves to 1-valued 
leaves, p, satisfies p < 1 — e or p > 1 + e for some constant e. Given the promise that the ratio of 0-valued 
and 1-valued inputs is bounded away from 1 by a constant e, a constant number of random queries will give 
the majority with high probability. Note in the Haar Tree no value of leaves has a majority, so Lemma 6 
does not apply in this case. 

Proof. We will only prove the case where the tree has a majority of leaves with value 1, but the case for a 
majority of leaves with value is analagous. Our proof follows by induction. Note that we will treat odd and 
even depth trees separately. For the odd depth base case, a depth- 1 tree has only two leaves, so if more than 
1/2 of the leaves have value 1, both must have value 1. This causes the root to have value 0. For the even 
depth base case, a depth-2 tree with the majority of leaves having value 1 has leaves with values (1, 1, 1, 1) 
or (1, 1, 1, 0) (and permutations), causing the root to have value 1. 

We assume for induction that all trees of depth 2k, (k > 1), with a majority of leaves with value 1, 
have root value 1. Now consider a depth (2k + 1) tree, T, with more than 1/2 of the leaves having value 1. 
Suppose for contradiction that T's root has value 1. 

Notice each of the two child nodes of the root of T is the root of a depth 2k tree. We call these two trees 
subtrees. Suppose one of the subtrees has r\ ■ 2 2k leaves with value 1 and the other subtree has r 2 • 2 2k leaves 
with value 1. We know r\ + r 2 > 1 because the majority of T's leaves have value 1. Thus at least one of 
the subtrees of depth 2k has more than 1/2 of its leaves having value 1, and by our inductive assumption it 
therefore has a root with value 1. Because the value of the root of T is the NAND of the values of its children, 
and one of the children has value 1 and the root has value 1, the other child must have value 0. 

Therefore the root of T is a fault node (since one of its children is 0-valued, and one is 1-valued). Thus in 
the subtree rooted at the 0-valued child, there can be no faults, by definition of the 1-Fault Nand Tree. 
But if there arc no faults in a depth 2k tree with root 0, all leaves in the tree must have value 0. Since the 
subtree rooted at the 0-valued child only has 0-valued leaves, even if the other subtree had only 1-valued 
leaves, there is no way for there to be a majority of 1-valued leaves in T , contradicting our assumption. Thus 
a tree of depth- (2k + 1) with a majority of 1-valued leaves must have root with value 0. 
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Now we use the fact that all depth (2k + 1) trees with a majority of 1-valued leaves have root value to 
prove the result for (2k + 2) = 2(k + 1) level trees. Suppose we have a depth (2k + 2) tree with a majority 
of leaves having value 1. For contradiction, we assume that this tree has root value 0. Again we can look at 
the two subtrees rooted at depth 1. Because of the form of the NAND function, both of the subtrees must 
have roots with value 1. But by the same argument as in the (2k + 1) case, we know that at least one of 
the subtrees has more than 1/2 of its leaves with value 1. But from the previous paragraph, we know such 
a subtree must have value at its root, leading to a contradiction. □ 
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